Disable Active Setup with Mandatory Profile and UEV 2.x??

Hi, I have been doing some research into UEV configuration with the use of mandatory profiles.  I'm wondering if Disabling Active setup is something we should do to increase the logon time?  if so what issues may I run into if I disable? what
is the process for disabling, is it just delete each registry entry or is there a global setting?

Not really an Ue-V question, but here goes..
Active setup is a tricky one.  In order to disable active setups you can find out what triggers the active setup to run or not run and incorporate those settings into your mandatory profile.  i.e.  whatever registry keys the active setup creates
when it runs.  If they are present, this should prevent the active setup from running.  Results can be mixed depending on what the active setup is doing.  Trial and error is required.
Depending on how the mandatory profile is configured, stored, accessed, etc it can greatly reduce login times.  If this is for some kind of RDSH environment without persistent profiles I would recommend avoiding any applications with active setup because
you can run into issues during times whenever everyone is logging in.  i.e. each morning.  There can only be so many msiexec.exe running on each box at any given time, so users get queued up waiting for an opening.  I recommend, if possible,
to repackage the applications that currently have an active setup in such a way that will remove the active setup.  If that isn't possible, stuffing the whatever information active setup writes into the mandatory profile may work.  Good luck.

Similar Messages

  • Can't open secured documents on windows 7 domain client with mandatory profiles.

    While opening certain PDF files we have the problem that the user is presented with a message that he does not have the rights permissions. This happens twice, after that the users gets an empty page with the message the Adobe version might not be up to date. We use Acrobat Pro 10, but this also happens while using Reader 11.0.8. On our windows 2008 terminal services machine this could be fixed by giving the user rights on c:\ to create and remove a file. :O. On windows 7 this doesn't work probably because of UAC. But we've tried every solution to that available on the internet, disabling uac, changing uac options, changing rights on userprofile folders, changing rights on c:\ but to no avail. When using process explorer we can see it wants to create a temp file p328hkl.tmp or something like that on C but it can't and immediattely after is shows the error on screen.
    Anyone who also has this problem or solved it? There are no problems with simple self made pdf files/scans but only with certain types of pdf files for which it tries to create a tmp file.
    Thanks,
    Peter

    Hi Brogers,
    Thanks for your reaction. We do have AppData redirection in place. We redirect AppData to a share on our data server which works perfectly fine for all other applications. The weird thing is that Reader/Acrobat try to write to C:\ which to my knowledge should not happen, is this maybe a fallback because it can’t write to a different location? Users have full control on their own roaming AppData but not on their local AppData that is made by windows itself while copying the mandatory default profile to C:\.
    I might use the wrong term while saying secured documents. I’m talking about a document created by Raet/Youforce a web application for personal administration. The documents can be opened by other viewers than Acrobat/Reader but then only contain the background and not the text. In Acrobat/Reader they do open normally when Acrobat/Reader can create the .tmp file. Otherwise it will not display the file at all. I would attach such a document to see but since it contains certain info I am not allowed to do so.
    I hope we can work out a solution for this.
    Met vriendelijke groet,
    Peter Gerritsen
    Engineer
    AndoBurg BV
    Voorstraat 31
    3931 HB Woudenberg
    T 033 479 40 80
    F 033 479 40 89
    E [email protected]<mailto:[email protected]>
    I www.andoburg.com<http://www.andoburg.com/>
    Als u niet de geadresseerde van dit bericht bent, verzoeken wij u ons hiervan op de hoogte te brengen en het bericht te verwijderen. AndoBurg BV aanvaardt geen aansprakelijkheid voor schade die voortvloeit uit elektronische verzending van informatie. Aan de inhoud van deze e-mail en eventuele bijlagen kunnen geen rechten worden ontleend, tenzij schriftelijk anders is overeengekomen.
    Van: brogers_1
    Verzonden: vrijdag 19 september 2014 20:10
    Aan: Peter Gerritsen
    Onderwerp:  Can't open secured documents on windows 7 domain client with mandatory profiles.
    Can't open secured documents on windows 7 domain client with mandatory profiles.
    created by brogers_1<https://forums.adobe.com/people/brogers_1> in Enterprise Deployment (Acrobat and Reader) - View the full discussion<https://forums.adobe.com/message/6745441#6745441>

  • App-V 5.0 SP2 with Mandatory Profiles

    Hi,
    We are having some issues with App-V 5.0 SP2 with HFX2 and HFX4 on our Windows 7 x64 Clients
    We use mandatory profiles and delete the local profile on logoff,
    HFX2 Issue:
    The AppData\Local\Microsoft\AppV\Client\VFS\<GUID> is only created once, subsequent logins don't have the folder structure created for the package VFS and all folders have read/write access for the user, when they should follow the base OS folder permissions
    We have found that a registry entry is created in HKLM\Software\Microsoft\AppV\MAV\Configuration\Packages\<GUID>\UserConfigEx\<USER-GUID>
    if we manually delete this registry key then appv will re-create the VFS folders in local app data
    AppV seems to be setting key's saying its created those folders and expects them to be there on the next login, is there a way to tell AppV that we are using mandatory profiles and to re-create the folders?
    HFX4 Issue:
    Hotfix 4 is a bigger problem in that a registry entry for <USER-GUID> is created in HKLM\SOFTWARE\Microsoft\AppV\Client\Virtualzation\LocalVFSSecuredUser
    The first time appv is used for that user, it works, all subsequent times appv packages fail to load unless that registry string is manually deleted.
    Is there any way to fix App-V 5 to work with mandatory profiles which are deleted on logoff?
    Thanks!

    Hi Nicke,
    The registry key's are located in HKLM, which causes permission problems as our uses are all standard users
    the HFX2 issue sort of works, the
    UserConfigEx key is created with the logged on user having read/write permissions, so as long as that user successfully runs a logoff script then the key is deleted, if the desktop crashes without running the logoff script and a new user logs in, then they
    don't have the rights to delete the sub keys and all future app-v localappdata VFS permissions are broken on that client,
    The HFX4 issue registry keys are all write protected from standard users,
    I'm not 100% sure these are the only area's which are causing problems (they are just the ones I've found!) and that just deleting the registry entries completely fixes the problem.  I didn't go down the path of deleting HKLM keys as a user as it seemed
    a bit of a brute force hack to me which I was trying to avoid :)
    If I give users rights to delete HKLM\Software\Microsoft\AppV\MAV\Configuration\Packages subkeys
    then I think they could break published applications if the <GUID> folders are somehow deleted?
    I was actually pretty surprised to find out that App-V 5.0 stores permanent information about user's in the HKLM hive, I would have thought all of this should live in the HKCU hive!
    I've not been able to find any documentation on how App-V uses HKLM keys to keep track of processes its already performed on a user and doesn't want to do again,
    Thanks!

  • I think pesimo customer service three days, I'm looking for someone I can ayudr activation problem with my CC and can not find anyone who can help me.

    I think pesimo customer service three days, I'm looking for someone I can ayudr activation problem with my CC and can not find anyone who can help me.

    Online Chat Now button near the bottom for Activation and Deactivation problems may help
    http://helpx.adobe.com/x-productkb/policy-pricing/activation-deactivation-products.html

  • E-Recruiting: Problems with search profile and serach templates

    Hi Recruiting-Experts,
    I´m facing problems with "Search Profiles" and "Search Templates"
    (Customizing SPRO --> SAP-E-Recruiting --> Recruitment --> Talent Warehouse --> Candidate --> Candidate Search )
    Out customers wants me to add a new search criterion to the talent search. It's a customer-field (type 'd' --> Date)  belonging to infotype 5106.
    Unfortunately, it doesn't work. The hit list is always empty.
    What I did:
    Customizing (see above)
    Updated search profile (report RCF_RECREATE_SEARCH_PROFILES)
    The result:
    I can see and choose the new search criterion on talent warehouse search site (recruiters startpage)
    I can find the data (internal format yyyymmdd) via transaction SKPR07 (see XML below, ZZEARLIEST_ENTRY 20090901)
    By the way, the hit list is also empty when adding and searching for birthdate.
    Has it got to do with the date stored in internal format?
    Thanks for any comments / help.
    Regards
    CHRIS
    =========================================================================

    Hi Sebastian,
    thanks for your quick answer.
    That's why I didn't get it done for hours yesterday.
    Thanks again,
    Regards
    CHRIS

  • Branch office setup with L3 switch and router with IOS security

    Hello,
    I am in the process of putting together a small branch office network and I am in need of some design advise. The network will support about 10-15 workstations/phones, 3-4 printers, and 4-5 servers. In addition we will eventually have up to 25-30 remote users connecting to the servers via remote access VPN, and there will also be 2-3 site-to-site IPSec tunnels to reach other branches.
    I have a 2911 (security bundle) router and 3560 IP Base L3 switch to work with. I have attached a basic diagram of my topology. My initial design plan for the network was to setup separate VLANs for workstation, phone, printer, and server traffic. The 3560 would then be setup with SVIs to perform routing between VLANs. The port between the router and switch would be setup as a routed port, and static routes would be applied on the switch and router as necessary. The thought behind this was that I'd be utilizing the switch backplane for VLAN routing instead instead of doing router-on-a-stick.
    Since there is no firewall between the switch and router my plan was to setup IOS firewalling on the router. From what I am reading ZBF is my best option for this. What I was hoping for was a way to set custom policies for each VLAN, but it seems that zones are applied per interface. Since the interface between the router and switch is a routed interface, not a trunk/subinterface(s), it doesn't seem like there would be a way for me to use ZBF to control traffic on different VLANs. From what I am gathering I would have to group all of my internal network into one zone, or I would have to scrap L3 switching all together and do router-on-a-stick if I want to be able to set separate policies for each VLAN. Am I correct in my thinking here?
    I guess what I am getting at is that I really don't want to do router-on-a-stick if I have a nice switch backplane to do all of the internal routing. At the same time I obviously need some kind of firewalling done on the router, and since different VLANs have different security requirements the firewalling needs to be fairly granular.
    If I am indeed correct in the above thinking what would be the best solution for my scenario? That is, how can I setup this network so that I am utilizing the switch to do L3 routing while also leveraging the firewall capabilities of IOS security?
    Any input would be appreciated.
    Thanks,
    Austin

    Thanks for the input.
    1. I agree, since I have only three to four printers, they need not be in a separate VLAN. I simply was compartmentalizing VLANs by function when I initially came up with the design.
    2. Here's a little more info on the phone situation. The phones are VoIP. The IP PBX is on premise, but they are currently on a completely separate ISP/network. The goal in the future is to converge the data and voice networks and setup PBR/route maps to route voice traffic out the voice ISP and data traffic out the other ISP. This leads up to #3. 
    3. The reason a router was purchased over a firewall was that ASA's cannot handle routing and dual ISPs very well. PBR is not supported at all on an ASA, and dual ISPs can only be setup in an active/standby state. Also, an ASA Sec+ does not have near the VPN capabilities that the 2911 security does. The ASA Sec+ would support only 25 concurrent IPSec connections while the 2911 security is capable of doing an upwards of 200 IPSec connections.
    Your point about moving the SVI's to a firewall to perform filtering between VLANs makes sense, however, wouldn't this be the same thing as creating subinterfaces on a router? In both cases you are moving routing from the switch backplane to the firewall/routing device, which is what I am trying to avoid.  

  • I want to get my parents setup with an imac and iPad.  They are elderly and we live in different countries.  I want to know what solution exists so I can be the remote administrator to maintain and keep them up and running .. I dont want anything fancy.

    I would like to setup my eldery parents with an imac and ipad which I know will greatly help them in their daily life.  The technology they love to play with whenever I visit, but they can never keep anything running or sync'ed unless I am around.  Medical and other issues make this a real challenge for them.  Unfortunately, I live in a different country and see them maybe once per year.  I'm surrounded my apple products but never tried remote administration and wondered what I would need (software and hardware) to make this noble venture sucessful.  Anyone out there has some experience or recommendations?  I'm looking for something that is simple and reliable to implement ...

    JokerGirl,
    This is Scott J, I work for Intel and wanted to try and help you out. Sorry to hear about your current PC and your knee!
    I agree with the bigger screen. I have the Samsung ATIV Smart PC with a screen 11.6" which is great to watch shows/movies!  anything bigger is almost too big for a tablet (personal opinion).
    Yes, most if not all tablets will have speakers and a headphone jack
    You can watch YouTube
    Only certain models have keyboards, you will want to specify this when making a purchase. Note: most keyboards are sold separately.
    Covers are usually pretty easy to come buy, as well as screen protectors (clear plastic that covers and protects your screen from scratches, etc.)
    Depending on the Operating System (Windows, Android, etc.) you will have access to an app store where you can buy and download content. Alternatively you can access your favorite sites to read news, get books, magazines, etc.
    Hooking things to your tablet - different tablets will have different ports (USB, HDMI, etc.) Question to ask prior to making a purchase as some do not have ports (iPad). Back to my Samsung, I have several ports and do hook it to my TV
    Tablets can run anywhere from $150-$1,000.  The mid-range $400-$700 should fulfill all of your needs above and more!
    Here's an article that might help you narrow down your search: http://electronics.howstuffworks.com/gadgets/high-tech-gadgets/5-tips-for-choosing-the-right-tablet....
    Happy Holidays!
    Scott
    #IntelTablets

  • Dual monitor setup with Docking station and W500 on windows 8

    Hi there
    I have a w500 with ATI Radeon 3650
    Trying hard to have it set up with windows 8 and two monitors with my docking station. It worked with XP, Vista, W7...but no go now.
    Any solutions out there? I don't care about catalyst control center, or which drivers I have to use, just give me back my two monitors connected to a docking station

    I have the same W500 setup and have had no luck finding Windows 8 drivers on Lenovo's site or AMD's. I have a support ticket in to Lenovo to see what they come up with. I have two flat panel monitors that I need to work. According to  MS, Catalyst Control Center has compatibility issues with Win8. It was easy to set up both monitors under Win7 with CCC. I have not been able to set them up using Windows display setting in Control Panel. Does anyone out there know of an app that I can use to replace CCC and run two monitors?
    kb5

  • Successful DSL Setup With Westell 6100G and Linksys WRT54G Router

    After a week of searching I finally figured out how to get DSL setup with my Linksys router.
    All I could get out of the Westell > Linksys router configuration was DSL downloads limited to less than 0.2 Mbps.   No matter what I did on the router settings that was it.    I had a second eHome router that easily configured and achieved the 1.0 Mbps download speeds so that confirmed Verizon and the Westell modem were not the issue.
    So what's wrong with the Linksys router configuration?    I had the Linksys WRT54G router Version 5.   Checking the firmware it was the original release of 1.0.0.   (See your routers instructions which can be downloaded from Linksys for how to check your firmware).   I downloaded the latest firmware version for this router model and version number.    Following the Linksys instructions I flashed the latest firmware 1.02.8.   Now I had an updated modem ready to be configured for DSL.   
    Assuming you already followed Verizons instructions to set the Westell modem to bridge mode setup your router to work with it. 
    Step 1: Go into the modem typing its address... Default 192.168.1.1   leave the ID blank and the default password is admin.
    Step 2: Go to the Basic > Setup screen.  
    Step 3:  Select PPPoE and the screen menus will change
    Step 4:  Enter your Verizon ID  (exclude @Verizon.net)
    Step 5:  Enter your Verizon Password.
    Step 6:  Go to the bottom of the screen and hit Save.   Wait and the router will indicate it was saved.
    That's it.  All you need are the three entries above to get it working.   Turn off the PC, Router and Westell.   Turn on the Westell, then the router and then boot the PC.   It should work at this point.    I now get the full DSL speed for both downloads and uploads.    
    The bottom line....check you router, especially the older models for updated firmware before you give up on it. 

    Glad top see you found a configuration for your Westell and Linksys to function.  Thanks for posting resolution.
    Mike_VZ
    Verizon Support
    Notice: Content posted by Verizon employees is meant to be informational and does not supersede or change the Verizon Forums User Guidelines or Terms of Service, or your Customer Agreement Terms and Conditions or Plan.

  • Can the WAP4410N be setup with WPA2-Enterprise and also be repeater by another WAP4410N?

    I have AP1 setup with WPA2-Enterprise. How would I setup AP2 (WAP4410N) to be a repeater for AP1?

    Hi Alec,
    Thanks for participating in the Small Business Support Community. I've posed your question to our engineers and the short answer is "no".
    /* Style Definitions */
    table.MsoNormalTable
    {mso-style-name:"Table Normal";
    mso-tstyle-rowband-size:0;
    mso-tstyle-colband-size:0;
    mso-style-noshow:yes;
    mso-style-priority:99;
    mso-style-qformat:yes;
    mso-style-parent:"";
    mso-padding-alt:0in 5.4pt 0in 5.4pt;
    mso-para-margin:0in;
    mso-para-margin-bottom:.0001pt;
    mso-pagination:widow-orphan;
    font-size:11.0pt;
    font-family:"Calibri","sans-serif";
    mso-ascii-font-family:Calibri;
    mso-ascii-theme-font:minor-latin;
    mso-fareast-font-family:"Times New Roman";
    mso-fareast-theme-font:minor-fareast;
    mso-hansi-font-family:Calibri;
    mso-hansi-theme-font:minor-latin;}
    WAP4410N can only repeat or bridge other supported Small Business APs/Routers.
    Thanks again for your participation and, although probably not the answer you wanted, I hope this helps.
    Stephanie Reaves
    Cisco Small Business

  • Bootcamp setup with Mac OS and WinXP; now what to use Ghost to image

    We have successfully taken a Mac and setup bootcamp with Mac OS and Windows XP; however, we have another 50 Mac's to deploy. It was our thought we could use Ghost to image the initial system and deploy to all others. However, in our attempts Ghost is only seeing the Mac side.
    Has anyone does this? Is there a way to get it to pick it all up? or do we have to manually install all 50 Mac's?

    jjoe141 wrote:
    I'm hearing with any of these tools we could image the Mac side, then do bootcamp and manually install WinXP OS/software on each system.
    If you use SuperDuper and your target drive is larger than your HD, you can use a block clone which will include everything on your internal drive including XP.

  • Mac mini setup with wireless mouse and keyboard

    Bought a new mini with wireless keyboard and mouse. Turns on, picks up the mouse and as soon as the registration setup window starts the connection is lost. It never picked up the keyboard. Apple support said it is not possible to set up a new mini with the wireless accessories so go buy wired ones. Is this really true? Is there a way to skip the registration window, install the wireless keyboard and mouse? Has anyone else had this problem?
    If what the phone support guy said is true then I am a very unhappy new Mac purchaser. Nowhere on the Mac mini site or even in the instruction booklet does it say that you have to have the wired accessories and now apparently I'll have to buy two of everything. Total garbage.

    Can you beg/borrow or steal any ("Windows") USB keyboard and mouse?  They should get you going.  You'll only need them for a few minutes when starting up, once.
    "Garbage" doesn't endear yourself when asking for help on an Apple board though!

  • Photos open with black profile and page has to be reloaded for correct display

    click on photos open erroneous display, with black borderline and some add on right hand side, which restricts the movement of photographs. it's like superimposition on main page.

    Start Firefox in [[Safe Mode]] to check if one of the add-ons is causing the problem (switch to the DEFAULT theme: Tools > Add-ons > Themes).
    * Don't make any changes on the Safe mode start window.
    See:
    * [[Troubleshooting extensions and themes]]
    See also:
    * http://kb.mozillazine.org/Images_or_animations_do_not_load

  • Help with colour profiles and wide gamut monitor

    Hi there,
    I know this issue must crop up a lot due to its confusing nature but I would really appreciate it if someone could explain what settings I should be using in Photoshop to get accurate colours. I had a look around and couldn't find any other discussions that answered this exactly.
    My set up is a Dell 2408WFP monitor which is wide-gamut. I have calibrated this using a huey Pro calibrator (therefore have an accurate system colour profile). My photos are in Canon sRGB space, set by Digital Photo Professional (obviously easily changed if need be).
    What I would like is to be able to preview what my photos will look like on a standard sRGB display. When I open a photo in Photoshop with all the settings on their default it looks extremely washed out, very low contrast and saturation. This is nothing like what the photos look like outside of Photoshop, and also not what the photos look like on other (normal gamut) displays. I have tried using the "proof colours" settings. When I have "proof setup" set to Internet Standard sRGB the colours look dreadful, oranges become blood-red, definitely not what I am getting when I view the image on a standard monitor. If I have it set to Monitor RGB then I get colours that look like my monitor outside of Photoshop -- this is the closest out of the three to the result I am actually getting on standard gamut displays. However I know it is not accurate because I know my monitor is wide gamut and therefore more has more contrast (and this is the case).
    So what combination of photo colour space, proof colour space, and proof colours settings should I be using? My main priority is just the Joe Average using his TN panel monitor on facebook, I accept that on my monitor they will look slightly different. Settings for print don't concern me at the moment.
    Thanks for the help. To anyone who will suggest that I read up on colour profiles... I have, and I understand them to an extent, but there are so many variables here that I am getting lost (monitor profile, photo profile, photoshop settings, DPP settings, faststone viewer's settings, browser's lack of awareness...)
    Andrew

    function(){return A.apply(null,[this].concat($A(arguments)))}
    thekrimsonchin wrote:
    I know this issue must crop up a lot due to its confusing nature
    You have no idea. 
    What I'm reading is that you want Photoshop, with its color management enabled, to display your sRGB photos as they would be seen on a true sRGB monitor - i.e., accurately.
    Something to always keep in mind, when everything's set right and working properly:  Your sRGB image displayed on your wide gamut monitor without color management (e.g., by Internet Explorer) will look bolder and brighter (more color-saturated) than the same image displayed in Photoshop with color-management.  There is no getting around this, because the sRGB profile is not equivalent to the monitor profile.  Do not expect them to look the same.
    It's hard, without being there and seeing what you're seeing, to judge whether your sRGB images are undersaturated compared to what's seen on other monitors.  I do know, as one with sRGB monitors myself, that images can look quite vibrant and alive in the sRGB color space.
    What we can't know is whether your judgment that your color-managed sRGB images are undersaturated is correct in an absolute sense, or whether you're just feeling the difference between seeing them on your monitor in non-color-managed apps and Photoshop.
    Photoshop normally does its color management like this:  It combines the information from the color profile in your document with the color profile of the monitor, which it retrieves from a standard place in Windows, and creates a transform used to display the colors.
    To have it do this you would NOT want the Proof Colors setting enabled.  It is the default behavior.
    -Noel
    P.S., I don't recall whether DPP is color-managed, but you might consider using Photoshop's raw converter, which definitely shows color-managed output, per the settings I described above.
    P.P.S.,  Your calibrator/profiler should have put the monitor profile in the proper place and set all the proper stuff up in Windows.  Is it specifically listed as compatible with the version of Windows you're running?

  • Disabling iCloud, problems with Address Book and iCal.

    Ok, I made the mistake of turning on iCloud before knowing much about it or really needing it.  I just have a MBP and no other devices.  So, I now have iCal and Address Book connected to iCloud.  I've tried to disable it but have not had success.  I export my data files for both and when I import the data back... the iCloud part comes with it.  What is so strange is that I can add events to iCal and iCal works without a glitch.  But, I can't make ANY changes to my Address Book.  It doesn't save any and Address Book just crawls along at a snails pace as if it is broken.  I believe this all started because I activated iCloud.  I'm NOT syncing it to any other device so I don't need it.
    Are these problems because of iCloud or because I exported/imported onto a new install?  I'm using a different user name on my same computer... but the iCloud account has no changes.
    I'm just confused as to what to do.  My Address Book goes so slow and I can't edit it.  I don't need iCloud, etc.  I try to turn it all off and that solves nothing.  I try to export / import my data file to my desktop and back after turning iCloud off and this solves nothing.  iCloud just comes back with that data.  What should probably be a simple task I can't solve.

    Please let me know if this works for you guys, it was a lifesaver for me!

Maybe you are looking for